General

  • Target

    baa718af6b97104cd5ad4bb7c7be0050_JaffaCakes118

  • Size

    2.6MB

  • Sample

    240823-gw3x2sygkg

  • MD5

    baa718af6b97104cd5ad4bb7c7be0050

  • SHA1

    79deedf8e3cac36e82e500c1a919418f331938e2

  • SHA256

    d826e0cbcf4ed1b6f6da7356867f3d27ab2248bdd09209a3d47ba75cd71c25d8

  • SHA512

    bf2777b81d679c67df6ecdffb529c9437eea1681f17f9ea8fa23b862ba0b36ea3a2af8ade1dedb908eb39be867bcaaaec5865fde42aea7f60ecfcc495a5272ef

  • SSDEEP

    49152:y3Ei2Lnu2S9xphxvrymYb4o2VvCj9hFIzcUdPqqaqABSC45cvTFehU3A2jNwod:y38u2SkmY32dzcUwTqABSC45RUw2td

Malware Config

Targets

    • Target

      baa718af6b97104cd5ad4bb7c7be0050_JaffaCakes118

    • Size

      2.6MB

    • MD5

      baa718af6b97104cd5ad4bb7c7be0050

    • SHA1

      79deedf8e3cac36e82e500c1a919418f331938e2

    • SHA256

      d826e0cbcf4ed1b6f6da7356867f3d27ab2248bdd09209a3d47ba75cd71c25d8

    • SHA512

      bf2777b81d679c67df6ecdffb529c9437eea1681f17f9ea8fa23b862ba0b36ea3a2af8ade1dedb908eb39be867bcaaaec5865fde42aea7f60ecfcc495a5272ef

    • SSDEEP

      49152:y3Ei2Lnu2S9xphxvrymYb4o2VvCj9hFIzcUdPqqaqABSC45cvTFehU3A2jNwod:y38u2SkmY32dzcUwTqABSC45RUw2td

    • Checks if the Android device is rooted.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks